# Vulnerabilities published in 2018


- [CVE-2018-10353](https://insights.sbomify.com/CVE-2018-10353/): SQL injection in Trend Micro Email Encryption Gateway (medium 6.5)
- [CVE-2018-10352](https://insights.sbomify.com/CVE-2018-10352/): SQL injection in Trend Micro Email Encryption Gateway (high 8.8)
- [CVE-2018-10351](https://insights.sbomify.com/CVE-2018-10351/): SQL injection in Trend Micro Email Encryption Gateway (high 8.8)
- [CVE-2018-10350](https://insights.sbomify.com/CVE-2018-10350/): SQL injection in Trend Micro Smart Protection Server (Standalone) (high 8.8)
- [CVE-2018-1035](https://insights.sbomify.com/CVE-2018-1035/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-1034](https://insights.sbomify.com/CVE-2018-1034/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-10329](https://insights.sbomify.com/CVE-2018-10329/): Cross-site scripting in phpipam:phpipam (medium 6.1)
- [CVE-2018-10328](https://insights.sbomify.com/CVE-2018-10328/): Hardcoded credentials in momentum:momentum axel 720p firmware (high 7.4)
- [CVE-2018-10327](https://insights.sbomify.com/CVE-2018-10327/): Information disclosure in printeron:printeron (high 7.0)
- [CVE-2018-10326](https://insights.sbomify.com/CVE-2018-10326/): Cross-site scripting in printeron:printeron (medium 5.4)
- [CVE-2018-10323](https://insights.sbomify.com/CVE-2018-10323/): Null dereference in canonical:ubuntu linux (medium 5.5)
- [CVE-2018-10322](https://insights.sbomify.com/CVE-2018-10322/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2018-10321](https://insights.sbomify.com/CVE-2018-10321/): Cross-site scripting in frogcms project:frogcms (medium 4.8)
- [CVE-2018-10320](https://insights.sbomify.com/CVE-2018-10320/): Cross-site scripting in frogcms project:frogcms (medium 4.8)
- [CVE-2018-1032](https://insights.sbomify.com/CVE-2018-1032/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-10319](https://insights.sbomify.com/CVE-2018-10319/): Cross-site scripting in frogcms project:frogcms (medium 4.8)
- [CVE-2018-10318](https://insights.sbomify.com/CVE-2018-10318/): Cross-site scripting in frogcms project:frogcms (medium 4.8)
- [CVE-2018-10316](https://insights.sbomify.com/CVE-2018-10316/): Integer overflow in nasm:netwide assembler (medium 5.5)
- [CVE-2018-10314](https://insights.sbomify.com/CVE-2018-10314/): Cross-site scripting in opmantek:open-audit (medium 5.4)
- [CVE-2018-10313](https://insights.sbomify.com/CVE-2018-10313/): Cross-site scripting in wuzhicms:wuzhicms (medium 5.4)
- [CVE-2018-10312](https://insights.sbomify.com/CVE-2018-10312/): Cross-site request forgery in wuzhicms:wuzhicms (high 8.8)
- [CVE-2018-10311](https://insights.sbomify.com/CVE-2018-10311/): Cross-site scripting in wuzhicms:wuzhicms (medium 6.1)
- [CVE-2018-10310](https://insights.sbomify.com/CVE-2018-10310/): Cross-site scripting in catapultthemes:cookie consent (medium 5.4)
- [CVE-2018-10309](https://insights.sbomify.com/CVE-2018-10309/): Cross-site scripting in responsive cookie consent project:responsive cookie consent (medium 5.4)
- [CVE-2018-10307](https://insights.sbomify.com/CVE-2018-10307/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-10306](https://insights.sbomify.com/CVE-2018-10306/): Cross-site scripting in ilias:ilias (medium 6.1)
- [CVE-2018-10305](https://insights.sbomify.com/CVE-2018-10305/): Missing authorization in simplemachines:simple machines forum (critical 9.8)
- [CVE-2018-10303](https://insights.sbomify.com/CVE-2018-10303/): Use after free in foxitsoftware:foxit reader (high 8.8)
- [CVE-2018-10302](https://insights.sbomify.com/CVE-2018-10302/): Use after free in foxitsoftware:foxit reader (high 7.8)
- [CVE-2018-10301](https://insights.sbomify.com/CVE-2018-10301/): Cross-site scripting in web-dorado:wd instagram feed (medium 6.1)
- [CVE-2018-10300](https://insights.sbomify.com/CVE-2018-10300/): Cross-site scripting in web-dorado:wd instagram feed (medium 6.1)
- [CVE-2018-1030](https://insights.sbomify.com/CVE-2018-1030/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-10299](https://insights.sbomify.com/CVE-2018-10299/): Integer overflow in beauty:beauty ecosystem coin (high 7.5)
- [CVE-2018-10298](https://insights.sbomify.com/CVE-2018-10298/): Cross-site scripting in discuz:discuzx (medium 5.4)
- [CVE-2018-10297](https://insights.sbomify.com/CVE-2018-10297/): Cross-site scripting in discuz:discuzx (medium 5.4)
- [CVE-2018-10296](https://insights.sbomify.com/CVE-2018-10296/): Cross-site scripting in 1234n:minicms (medium 6.1)
- [CVE-2018-10295](https://insights.sbomify.com/CVE-2018-10295/): Cross-site request forgery in chemcms project:chemcms (high 8.8)
- [CVE-2018-10294](https://insights.sbomify.com/CVE-2018-10294/): Cross-site scripting in flexense:diskboss (medium 6.1)
- [CVE-2018-1029](https://insights.sbomify.com/CVE-2018-1029/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-10289](https://insights.sbomify.com/CVE-2018-10289/): Denial of service in artifex:mupdf (medium 5.5)
- [CVE-2018-10286](https://insights.sbomify.com/CVE-2018-10286/): Information disclosure in ericssonlg:ipecs nms (high 8.8)
- [CVE-2018-10285](https://insights.sbomify.com/CVE-2018-10285/): Auth bypass in ericssonlg:ipecs nms (critical 9.8)
- [CVE-2018-10284](https://insights.sbomify.com/CVE-2018-10284/): SQL injection in adaltech:g-ticket (critical 9.8)
- [CVE-2018-10283](https://insights.sbomify.com/CVE-2018-10283/): SQL injection in cliquemania:loja virtual (critical 9.8)
- [CVE-2018-1028](https://insights.sbomify.com/CVE-2018-1028/): Code injection in Excel (high 8.8)
- [CVE-2018-1027](https://insights.sbomify.com/CVE-2018-1027/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-10268](https://insights.sbomify.com/CVE-2018-10268/): Cross-site scripting in fastadmin:fastadmin (medium 5.4)
- [CVE-2018-10267](https://insights.sbomify.com/CVE-2018-10267/): Cross-site request forgery in wtcms project:wtcms (high 8.8)
- [CVE-2018-10266](https://insights.sbomify.com/CVE-2018-10266/): Cross-site request forgery in beescms:beescms (high 8.8)
- [CVE-2018-10265](https://insights.sbomify.com/CVE-2018-10265/): Cross-site request forgery in hongcms project:hongcms (high 8.8)
- [CVE-2018-10260](https://insights.sbomify.com/CVE-2018-10260/): Path traversal in hrsale project:hrsale (high 8.8)
- [CVE-2018-1026](https://insights.sbomify.com/CVE-2018-1026/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-10259](https://insights.sbomify.com/CVE-2018-10259/): Cross-site scripting in hrsale project:hrsale (medium 5.4)
- [CVE-2018-10258](https://insights.sbomify.com/CVE-2018-10258/): Code injection in codeslab:shopy point of sale (high 8.8)
- [CVE-2018-10257](https://insights.sbomify.com/CVE-2018-10257/): Code injection in hrsale project:hrsale (high 8.8)
- [CVE-2018-10256](https://insights.sbomify.com/CVE-2018-10256/): SQL injection in hrsale project:hrsale (high 8.8)
- [CVE-2018-10255](https://insights.sbomify.com/CVE-2018-10255/): Code injection in clustercoding:blog master pro (high 8.8)
- [CVE-2018-10254](https://insights.sbomify.com/CVE-2018-10254/): Memory corruption in nasm:netwide assembler (high 7.8)
- [CVE-2018-10253](https://insights.sbomify.com/CVE-2018-10253/): Memory corruption in paessler:prtg network monitor (high 7.5)
- [CVE-2018-10252](https://insights.sbomify.com/CVE-2018-10252/): Weak cryptography in actiontec:wcb6200q firmware (high 8.1)
- [CVE-2018-10251](https://insights.sbomify.com/CVE-2018-10251/): Missing authorization in sierrawireless:aleos (critical 9.8)
- [CVE-2018-10250](https://insights.sbomify.com/CVE-2018-10250/): Cross-site scripting in icmsdev:icms (medium 5.4)
- [CVE-2018-1025](https://insights.sbomify.com/CVE-2018-1025/): Information disclosure in Internet Explorer 11 (medium 4.3)
- [CVE-2018-10249](https://insights.sbomify.com/CVE-2018-10249/): Cross-site request forgery in baijiacms project:baijiacms (high 8.8)
- [CVE-2018-10248](https://insights.sbomify.com/CVE-2018-10248/): Cross-site request forgery in wuzhicms:wuzhicms (medium 6.5)
- [CVE-2018-10245](https://insights.sbomify.com/CVE-2018-10245/): Information disclosure in awstats:awstats (medium 5.3)
- [CVE-2018-10244](https://insights.sbomify.com/CVE-2018-10244/): Integer overflow in oisf:suricata (critical 9.8)
- [CVE-2018-10243](https://insights.sbomify.com/CVE-2018-10243/): Memory corruption in oisf:libhtp (critical 9.8)
- [CVE-2018-10242](https://insights.sbomify.com/CVE-2018-10242/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2018-10241](https://insights.sbomify.com/CVE-2018-10241/): Null dereference in solarwinds:serv-u (medium 6.5)
- [CVE-2018-10240](https://insights.sbomify.com/CVE-2018-10240/): Weak cryptography in solarwinds:serv-u (high 7.3)
- [CVE-2018-10239](https://insights.sbomify.com/CVE-2018-10239/): Weak cryptography in infoblox:nios (medium 6.7)
- [CVE-2018-10238](https://insights.sbomify.com/CVE-2018-10238/): Memory corruption in bacnet protocol stack project:bacnet protocol stack (critical 9.8)
- [CVE-2018-10237](https://insights.sbomify.com/CVE-2018-10237/): Denial of Service in Google Guava (medium 5.9)
- [CVE-2018-10236](https://insights.sbomify.com/CVE-2018-10236/): Code injection in poscms:poscms (high 7.2)
- [CVE-2018-10235](https://insights.sbomify.com/CVE-2018-10235/): Code injection in poscms:poscms (high 7.2)
- [CVE-2018-10234](https://insights.sbomify.com/CVE-2018-10234/): Cross-site scripting in ultimatemember:user profile \& membership (medium 4.8)
- [CVE-2018-10233](https://insights.sbomify.com/CVE-2018-10233/): Cross-site request forgery in ultimatemember:user profile \& membership (high 8.8)
- [CVE-2018-10232](https://insights.sbomify.com/CVE-2018-10232/): Cross-site request forgery in topdesk:topdesk (medium 6.5)
- [CVE-2018-10231](https://insights.sbomify.com/CVE-2018-10231/): Cross-site scripting in topdesk:topdesk (medium 6.1)
- [CVE-2018-10230](https://insights.sbomify.com/CVE-2018-10230/): Cross-site scripting in zend:zend server (medium 6.1)
- [CVE-2018-1023](https://insights.sbomify.com/CVE-2018-1023/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2018-10229](https://insights.sbomify.com/CVE-2018-10229/): Information disclosure in google:chrome (medium 4.8)
- [CVE-2018-10228](https://insights.sbomify.com/CVE-2018-10228/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2018-10227](https://insights.sbomify.com/CVE-2018-10227/): Cross-site scripting in 1234n:minicms (medium 5.4)
- [CVE-2018-10225](https://insights.sbomify.com/CVE-2018-10225/): thinkphp SQL Injection via the index.php s parameter (critical 9.8)
- [CVE-2018-10224](https://insights.sbomify.com/CVE-2018-10224/): Cross-site request forgery in yzmcms:yzmcms (medium 6.8)
- [CVE-2018-10223](https://insights.sbomify.com/CVE-2018-10223/): Cross-site request forgery in yzmcms:yzmcms (medium 6.8)
- [CVE-2018-10222](https://insights.sbomify.com/CVE-2018-10222/): Cross-site request forgery in icmsdev:icms (high 8.8)
- [CVE-2018-10221](https://insights.sbomify.com/CVE-2018-10221/): Cross-site scripting in wuzhicms:wuzhicms (medium 5.4)
- [CVE-2018-10220](https://insights.sbomify.com/CVE-2018-10220/): Server-side request forgery in mushmush:glastopf (high 8.8)
- [CVE-2018-1022](https://insights.sbomify.com/CVE-2018-1022/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-10219](https://insights.sbomify.com/CVE-2018-10219/): Information disclosure in baijiacms project:baijiacms (medium 5.3)
- [CVE-2018-10213](https://insights.sbomify.com/CVE-2018-10213/): Cross-site scripting in vaultize:enterprise file sharing (medium 5.4)
- [CVE-2018-10212](https://insights.sbomify.com/CVE-2018-10212/): Missing authorization in vaultize:enterprise file sharing (medium 5.4)
- [CVE-2018-10211](https://insights.sbomify.com/CVE-2018-10211/): Missing authorization in vaultize:enterprise file sharing (medium 5.3)
- [CVE-2018-10210](https://insights.sbomify.com/CVE-2018-10210/): Information disclosure in vaultize:enterprise file sharing (medium 5.3)
- [CVE-2018-1021](https://insights.sbomify.com/CVE-2018-1021/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-10209](https://insights.sbomify.com/CVE-2018-10209/): Cross-site scripting in vaultize:enterprise file sharing (medium 5.4)
- [CVE-2018-10208](https://insights.sbomify.com/CVE-2018-10208/): Cross-site scripting in vaultize:enterprise file sharing (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/147/